I need configuration help In vwire mode ,....

[Gururaj]

Hi All,..

Kindly refer the fallowing topology, in which VLANs (ex:10 VLANs) are created and any traffic to internet is routed to the core firewall. In between core switch and firewall i have connected PaloAlto firewall in VWire mode and also have defined the policy to allow traffic. Did i need to define any VLANs in PaloAlto? Because i am not able to see any packet hits on PaloAlto when connected ( Ping is not happening between core switch to core firewall),..

Is any extra configuration is required in multiple VLAN scenario ?

Device Description : Model-2050, PAN-OS: 5.0.0

Thank you

Gururaj

Scenario:

[kdd]

Hi Gururaj,

for using virtualwire-mode the interface of the core firewall and the switch should have no

(in case of access-port) or only one and then the same vlan-tag (trunk-interface).

Best regards

Klaus

[sdurga · Accepted solution]

I assume that the link between the core switch and the core firewall is a trunk port in that case multiple vlan traffic will pass through Paloalto V-wire. For allowing tagged traffic trough vwire you have to do the following config as below. Below u can see my vwire allows vlan traffic 1-8 by default this is set to 0 which means untagged traffic .